$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa File: a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json) Hash identifier: QqTcojmP3Hn1y8W0/kZF6LfHdom8FhHEW/F4sYWUJYU= Subject key identifier: C4:90:6D:AC:78:38:EC:88:DE:6C:BD:C6:1E:92:14:18:70:B1:D3:21 Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584D86956009924BB048AC199E80 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 17024 IP address blocks: 23.154.56.0/24 maxlen: 24 198.135.185.0/24 maxlen: 24 2602:2d1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:60:09:92:4b:b0:48:ac:19:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=7625c9af-f912-4535-ac06-0bc70fa2b686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:bd:c6:a3:59:75:8e:71:e9:4e:b0:4e:c2: 12:8c:76:d9:d7:0e:0a:67:39:dd:70:06:c9:08:d7: 45:fa:93:90:96:68:cd:bb:e6:59:d5:0b:98:61:6c: 8b:62:fc:10:a2:7b:b0:57:d9:1e:a7:d0:5f:f7:52: d0:ff:a1:b0:96:09:21:64:c1:9f:24:78:e3:a5:b9: 6c:34:c0:6f:29:4d:9d:f5:cf:cc:d2:af:0f:17:6e: 03:20:2a:44:c4:4b:d5:c9:4f:09:8c:a0:5f:34:44: 61:7e:be:b8:d3:0c:eb:0a:97:c1:2b:24:46:9c:b8: be:25:8e:ae:67:2f:5c:a7:9a:de:64:8f:05:87:4c: c8:da:7f:f9:06:e0:35:5a:b0:44:db:b6:66:c9:28: 65:6f:96:9d:0b:eb:c8:d6:d7:54:54:56:d0:b4:9c: 89:86:76:08:1a:f4:7f:e9:17:ec:48:84:b7:65:66: 61:4c:64:c4:67:8d:60:b7:1c:97:98:d7:df:34:4a: d6:03:e0:7d:3a:33:5f:14:c6:2f:da:b6:82:6b:56: a1:44:f8:f7:95:21:3a:89:30:80:0d:91:a0:c4:d9: f4:40:e1:19:2b:03:fd:f2:c5:0b:84:ba:ae:b0:fc: 7d:7e:0b:98:4b:90:11:3e:1e:c8:8f:df:d6:2b:b5: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:90:6D:AC:78:38:EC:88:DE:6C:BD:C6:1E:92:14:18:70:B1:D3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 23.154.56.0/24 198.135.185.0/24 IPv6: 2602:2d1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:2f:7e:25:75:32:87:d1:8f:5a:76:a2:5f:a1:e3:83:5d: 46:28:88:ca:54:c5:df:99:ef:5d:d6:ae:a5:56:72:c2:cd:e9: 3f:44:76:e4:e9:ae:d2:e5:00:df:91:6f:83:fe:70:f0:e2:f5: 82:cf:63:f8:22:ca:89:f2:87:ba:e1:74:50:bd:81:c8:70:47: 66:e5:9d:c8:fb:7b:d1:8e:fa:1a:27:9f:fd:e0:72:f8:7d:b3: 21:e9:91:e8:2c:21:d4:2e:1b:6b:bb:8e:e2:bb:54:fa:26:95: 29:bb:67:ed:d1:e7:2c:1e:5f:a0:88:81:ad:58:71:9f:e0:a1: 6d:a8:2f:25:a5:ca:1f:e4:e9:29:c8:49:25:40:1f:81:4f:0c: 93:ad:a6:ee:ad:3f:5c:fe:ef:5f:4f:b1:2c:c9:d8:9a:2a:e4: ab:0f:c9:01:d7:b6:51:72:90:c1:4c:0f:6f:88:a5:f9:44:1e: 2d:64:41:2f:e6:08:75:75:c7:df:79:a2:6d:10:dc:84:28:92: 85:57:f0:b5:57:c5:5d:55:d5:55:d9:9e:bf:75:67:d0:6a:54: 6c:c2:f2:c9:b4:26:59:63:9a:10:61:d0:9e:e1:24:18:34:4e: 4b:ae:65:79:91:67:75:55:7a:6f:e2:73:ec:bc:05:b9:dd:89: c6:a5:fa:4c -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE2GlWAJkkuwSKwZnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NzYyNWM5YWYtZjkxMi00NTM1LWFjMDYtMGJjNzBmYTJiNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLC9xqNZdY5x6U6wTsISjHbZ1w4KZzndcAbJ CNdF+pOQlmjNu+ZZ1QuYYWyLYvwQonuwV9kep9Bf91LQ/6GwlgkhZMGfJHjjpbls NMBvKU2d9c/M0q8PF24DICpExEvVyU8JjKBfNERhfr640wzrCpfBKyRGnLi+JY6u Zy9cp5reZI8Fh0zI2n/5BuA1WrBE27ZmyShlb5adC+vI1tdUVFbQtJyJhnYIGvR/ 6RfsSIS3ZWZhTGTEZ41gtxyXmNffNErWA+B9OjNfFMYv2raCa1ahRPj3lSE6iTCA DZGgxNn0QOEZKwP98sULhLqusPx9fguYS5ARPh7Ij9/WK7UC9wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFMSQbax4OOyI3my9xh6SFBhwsdMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvYTE4YTg4YmUtZjk1ZS0z ZmJjLWFhNzktZTk1ZDVhOTQzNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5o4AwQA xoe5MA4EAgACMAgDBgQmAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcDC9+JXUyh9GPWnaiX6Hjg11G KIjKVMXfme9d1q6lVnLCzek/RHbk6a7S5QDfkW+D/nDw4vWCz2P4IsqJ8oe64XRQ vYHIcEdm5Z3I+3vRjvoaJ5/94HL4fbMh6ZHoLCHULhtru47iu1T6JpUpu2ft0ecs Hl+giIGtWHGf4KFtqC8lpcof5OkpyEklQB+BTwyTraburT9c/u9fT7EsydiaKuSr D8kB17ZRcpDBTA9viKX5RB4tZEEv5gh1dcffeaJtENyEKJKFV/C1V8VdVdVV2Z6/ dWfQalRswvLJtCZZY5oQYdCe4SQYNE5LrmV5kWd1VXpv4nPsvAW53YnGpfpM -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:48 2026 by rpki-client